Skip to content

Reference guide

Secure platforms for medical practices

DEOCAs designs and connects; the platform your practice contracts holds the data. Every platform below signs a business associate agreement directly with your practice on its eligible plans.

Forms, messages and reminders can be offered in English, in Spanish, or in any language your practice needs.

Talk to us about your practice

Three rules that never change

The account belongs to the practice

You open it, you sign the agreement, you own everything in it. Nothing is created under a DEOCAs account.

DEOCAs works with temporary access

We build with an access the practice grants for the project and revokes at delivery. What stays behind is the design and the connection, not our credentials.

No answer passes through DEOCAs

Nothing a patient types travels through our servers, our email or any automation of ours. It goes from the patient to the platform your practice contracts.

By need

The platform for each need, and what we do with it.

Two or three well-known options per need, chosen because each one puts a business associate agreement on the table for a practice, not only for a hospital. The condition next to each name is what its own site states.

Pre-visit forms

History, consent and insurance details, completed from a phone before the patient arrives.

Drag-and-drop forms with signatures, file uploads and conditional questions.

Agreement
Signs a business associate agreement when the HIPAA features are enabled, available on its Gold and Enterprise plans.
What DEOCAs does
Designs the form flow, embeds it on the site in the practice’s account and tests it with fictitious data.

Intake forms and client questionnaires built for practices, now sold as PracticeQ.

Agreement
Offers a business associate agreement from inside the account to customers subject to HIPAA.
What DEOCAs does
Maps which form goes with which visit type, links each one from the right page and checks the patient path on a phone.

Patient intake, eligibility and payments for larger practices and groups.

Agreement
Enters into business associate agreements with the healthcare providers it serves.
What DEOCAs does
Places the check-in entry points on the site and keeps the wording consistent with the rest of the pages.

Online appointments

A patient picks a time from the site, in the language they read, without calling.

If your EHR already includes a patient portal with scheduling, use that first: it is already covered by the agreement you signed with the EHR. The platform below is for practices whose EHR offers none, or one patients will not use.

Luma Health

Official site

Self-scheduling, waitlists and reminders that read and write the practice calendar.

Agreement
Signs a business associate agreement with its customers and publishes the template on its site.
What DEOCAs does
Designs the booking entry on every page that needs one, connects it to the practice’s account and tests it with fictitious appointments.

Messages and reminders

Two-way texting, appointment reminders and a way to answer the front desk from a phone.

Phones, texting, reminders and payments in one system for small practices.

Agreement
Its terms of service include a business associate addendum for clients that are covered entities.
What DEOCAs does
Adds the text-us button and the contact points to the site and writes the templates in the languages the practice needs.

Spruce Health

Official site

A practice phone line, secure messaging and fax in one app.

Agreement
Includes a business associate agreement in every trial and paid plan for organizations that need one.
What DEOCAs does
Connects the practice number and the messaging link to the site and checks that each message lands where the practice expects.

Telemedicine

A video visit the patient can join from a link, without an app to install.

A browser-based waiting room and video visit built for clinicians.

Agreement
Offers a business associate agreement for an individual provider on its free plan and a clinic-wide one on its Premium plan.
What DEOCAs does
Puts the visit link and the instructions on the site, in both languages, and tests the patient path on a phone.

Zoom for Healthcare

Official site

Video visits and waiting rooms on a service most patients already know.

Agreement
Enters into a business associate agreement with healthcare customers on its Pro, Business, Business Plus and Enterprise plans.
What DEOCAs does
Designs how a patient reaches the visit from the site and documents the steps for the front desk.

Email and documents with an agreement

The mailbox and the shared documents the practice works in every day.

Google Workspace

Official site

Gmail, Drive, Calendar and Meet under the practice’s own domain.

Agreement
Offers a business associate amendment, accepted from the admin console, for the services on its HIPAA included functionality list.
What DEOCAs does
Sets up the practice domain and the mailboxes the site forms deliver to, then hands over the administrator role.

Microsoft 365

Official site

Outlook, OneDrive, Teams and SharePoint under the practice’s domain.

Agreement
Includes its business associate agreement in the data protection addendum for customers that are covered entities.
What DEOCAs does
Connects the domain, the mail records and the site forms to the practice’s tenant, then leaves the administrator role with the practice.

Encrypted email that works from the mailbox the practice already uses.

Agreement
Includes a business associate agreement with every account, at no extra charge.
What DEOCAs does
Routes the site’s contact and request forms to the practice’s encrypted mailbox and tests the delivery.

Hushmail for Healthcare

Official site

Encrypted email, secure web forms and e-signatures for small practices.

Agreement
Includes a signed business associate agreement with its Hushmail for Healthcare plans.
What DEOCAs does
Embeds the secure forms on the site and points every reply to the practice’s address.

Electronic signature and files

Consents to sign and documents to exchange, with a record of who signed what and when.

Electronic signature for consents, agreements and financial policies.

Agreement
Offers a business associate addendum for its eSignature service to customers that must comply with HIPAA.
What DEOCAs does
Prepares the signing flow the practice will send and links the templates from the right pages.

Cloud files and folders with access controls and audit logs.

Agreement
Signs a business associate agreement on its Enterprise, Enterprise Plus and Enterprise Advanced accounts.
What DEOCAs does
Designs the folder structure and the upload points that connect to the practice’s account.

Team file storage with sharing controls and a signing tool.

Agreement
Lets team admins sign a business associate agreement from the admin console on its Standard, Business, Advanced, Business Plus and Enterprise plans.
What DEOCAs does
Sets up the shared structure with the practice and tests the request links with fictitious files.

Reviews and reputation

Asking for reviews after the visit and replying to them without naming anyone.

Review requests, review replies and listings for local businesses.

Agreement
Incorporates a HIPAA addendum into its master service agreement for covered entities on its Local Business and Enterprise services.
What DEOCAs does
Connects the review flow to the site and the Google Business Profile and writes the request messages in both languages.

Review invitations, texting and payments for local businesses.

Agreement
Applies its standard business associate agreement to clients that are covered entities under HIPAA.
What DEOCAs does
Places the review and text entry points on the site and checks the patient path on a phone.

Read this before you contract anything

What this page is, and what it is not.

DEOCAs is not a partner, reseller or affiliate of any platform on this page and does not endorse them. They are here because each one publishes, on its own site, that it signs a business associate agreement with a practice on the plans that include it.

The agreement is always between the platform and your practice. DEOCAs signs nothing on your behalf and receives no patient information at any point. Plans, names and conditions change: confirm the current terms with the provider before you contract.

Nothing here makes a practice compliant with any law. That depends on how the practice uses the tools, on its policies and on its own review. This page is a starting point for that conversation, not a substitute for it.

Fair questions

Does DEOCAs sign a business associate agreement?

No. The platform your practice contracts signs it with your practice, on the plan that includes it. DEOCAs designs the flow and connects the platform to your site, but never receives, stores or transports patient information, so there is nothing for us to be a business associate of.

Can the forms be in Spanish?

Yes. Forms, messages and reminders can be written in English, in Spanish or in any language your patients read. We write both versions by hand, in the register your patients use.

What if we already use an EHR with a patient portal?

Use the portal first. It is already covered by the agreement you signed with the EHR, and your patients have one login instead of two. We add a platform from this page only for what the portal does not do, or does so poorly that patients avoid it.

Who pays the platform?

The practice contracts and pays the platform directly, under its own name, and keeps the account when the project ends. DEOCAs quotes the design, the connection and the testing in writing, separately from any platform fee.

Tell us what your practice needs.

Three quick questions, in English or Spanish, and a reply within one business day. If a platform on this page fits, we say which one and why.

ContactCall now